Tag: GitHub
Dependabot, A GitHub Bot, Learns To Communicate Bad News in Useful Ways
Dependabot, a tool for discovering weak open source package dependencies in software projects, was bought by GitHub in 2019. Since then, Dependabot has assisted...
Is Java Dead?
Java has been one of the most in-demand languages for over 20 years now. It is widely used across the industry and is often...
Vulnerabilities Discovered On GitHub In Popular Open Source Projects
Researchers identified serious flaws in multiple famous open source projects on Friday, each of which can be used to launch a supply chain attack...
Why and How to Become an Open Source Contributor
Open source is often associated with coding, giving the impression it’s meant only for computer geeks. But anybody can become an open source contributor...
GitHub Advisory Database Now Available For Community Contributions
Using the usual pull request to edit the document, Microsoft will allow community members to submit information and code samples to security advisories. The...
GitHub’s Sponsor-Only Repositories Incentivise Open Source Investments
GitHub is releasing private repositories to which only sponsors have access, in an effort to encourage open source investment.
Developers that willingly give up their...
OpenSSF Scorecards v4 From Google And GitHub Is Now Available
The Open Source Security Foundation (OpenSSF) has released version 4 of its Scorecards initiative, which was launched by GitHub and Google. Scorecards is an...
Open Source Developer Corrupts Popular Libraries Impacting Large Number of Projects
According to Bleeping Computer, a developer appears to have purposely damaged two open source libraries on GitHub and the software registry npm "faker.js" and...
GitHub Improves Code Navigation Feature
GitHub has announced to improve its code navigation feature with two enhancements shortly after it made significant changes to its code search option. The...
Open Source Project ‘GoTestWAF’ to Evaluate Web Application Security Solutions
GoTestWAF is a tool for API and OWASP attack simulation that supports a wide range of API protocols including REST, GraphQL, gRPC, WebSockets, SOAP,...
